TCP: Options Error WSF Too Big
This protocol anomaly triggers when it detects a WSF (Window Scale Factor) option with a specified value that is bigger than the valid limit (14). Because these ambiguous packets can be interpreted by the receiving TCP stack in different, unpredictable ways, it is recommended to drop them.
Extended Description
TCP packets in which the WSF option value exceeds 14 constitute a protocol anomaly. This condition could be the result of a network configuration error. It could also indicate a denial of service attack attempt involving the injection of malformed TCP/IP datagrams.
References
Short Name
TCP:AMBIGUOUS:WSF-TOOBIG
Severity
Minor
Recommended
False
Recommended Action
None
Category
TCP
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown